Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
18,020 exploits
GitHub PoC★ 3
Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using the Log4J vulnerability (CVE-2021-44228). I examined teh amount of endpoints communicating with the server and knowing jnidi as a common in the vulnerbilty found it in clear text
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC★ 1
Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion
ColdFusion | Improper Access Control (CWE-284)
100RISK
open ↗GitHub PoC★ 9
evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISK
open ↗GitHub PoC
Madan301/CVE-2024-2054
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
85RISK
open ↗GitHub PoC★ 2
Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
open ↗GitHub PoC★ 1
exploit CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISK
open ↗GitHub PoC
Nhom6KTLT/CVE-2010-3124
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib
28RISK
open ↗GitHub PoC★ 2
XenoM0rph97/CVE-2024-30896
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut
48RISK
open ↗GitHub PoC★ 1
sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
Authentication bypass using an alternate path or channel
100RISK
open ↗GitHub PoC★ 130
Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISK
open ↗GitHub PoC
Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RISK
open ↗GitHub PoC★ 8
POC code according to trendmicro's research
Internet Shortcut Files Security Feature Bypass Vulnerability
93RISK
open ↗GitHub PoC
JolynNgSC/Zerologon_CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 6
it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RISK
open ↗GitHub PoC★ 1
Lilly-dox/Exploit-CVE-2023-22518
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RISK
open ↗GitHub PoC★ 2,448
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Use-after-free in Linux kernel's netfilter: nf_tables component
76RISK
open ↗GitHub PoC★ 1
Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.
Microsoft Outlook Elevation of Privilege Vulnerability
100RISK
open ↗GitHub PoC★ 27
aiohttp LFI (CVE-2024-23334)
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
70RISK
open ↗GitHub PoC★ 1
A vuln about csapp.
Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary cod
48RISK
open ↗GitHub PoC★ 19
Unauthenticated Command Injection In Progress Kemp LoadMaster
LoadMaster Pre-Authenticated OS Command Injection
100RISK
open ↗GitHub PoC★ 20
A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
70RISK
open ↗GitHub PoC★ 54
Fortinet FortiClient EMS SQL Injection
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio
100RISK
open ↗GitHub PoC★ 1
Matrexdz/CVE-2024-1071-Docker
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
85RISK
open ↗GitHub PoC★ 1
K3ysTr0K3R/CVE-2017-12617-EXPLOIT
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISK
open ↗GitHub PoC★ 3
Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential execution of malicious code or data leakage. This vulnerability can be exploited for code execution CVE-2023-3824
Buffer overflow and overread in phar_dir_read()
53RISK
open ↗GitHub PoC★ 1
CVE-2024-1071
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
85RISK
open ↗GitHub PoC
Proof-of-concept exploit for CVE-2024-25153.
Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
60RISK
open ↗GitHub PoC★ 12
The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.